Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft
File:                     RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft (raw, json)
Hash identifier:          TPG4jdEt2OpG+ti/u+sPd6SiuxV3POV52tYFvTInyAI=
Subject key identifier:   A5:AE:6F:6A:79:4B:66:12:04:DB:2C:34:29:08:C4:B7:E0:B7:57:37
Authority key identifier: 44:6F:AF:92:3B:EB:AF:96:35:72:87:FE:25:09:91:C7:54:91:45:4D
Certificate issuer:       /CN=A91FF1CC/serialNumber=446FAF923BEBAF96357287FE250991C75491454D
Certificate serial:       014D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RG-vkjvrr5Y1cof-JQmRx1SRRU0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft
Manifest number:          013D
Signing time:             Wed 07 Oct 2026 06:06:45 +0000
Manifest this update:     Wed 07 Oct 2026 06:06:44 +0000
Manifest next update:     Wed 14 Oct 2026 06:06:44 +0000
Files and hashes:         1: RG-vkjvrr5Y1cof-JQmRx1SRRU0.crl (hash: iSxjPEHMxpv7SF5XfM/48xpTCjOM/gzf1tNo0hI7ahk=)
                          2: 1ED36EFC590C11F0913BCB35C4F9AE02.roa (hash: 1wBdfmz9ZOlgXA8cUT97W+oxh2g0aMueEhoUhmPC3Ic=)
                          3: B7E221E4024311F0BD990F64C4F9AE02.roa (hash: DNVcT9vlOL5C+M5NWsx8rDKEeNWClzlTLjHUADJPF9Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.crl
                          rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RG-vkjvrr5Y1cof-JQmRx1SRRU0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 06:06:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 333 (0x14d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FF1CC, serialNumber=446FAF923BEBAF96357287FE250991C75491454D
        Validity
            Not Before: Oct  7 06:06:44 2026 GMT
            Not After : Oct 14 06:06:44 2026 GMT
        Subject: CN=6ac5e175-4cdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ec:e5:73:0a:bb:09:82:0b:85:ba:fb:da:32:
                    20:c1:b0:2f:bf:ab:1e:24:6e:06:05:09:2b:19:35:
                    32:41:ff:ba:eb:b2:f0:02:68:93:4e:e1:fc:35:6a:
                    a7:c5:dd:98:74:e0:80:3a:fd:00:be:8a:23:a1:a5:
                    da:83:7a:e9:eb:80:7d:43:0e:c0:8f:31:ba:59:a4:
                    16:3e:22:5b:f9:27:09:fc:0a:6f:d5:37:09:33:3f:
                    6b:fc:c9:24:d3:cc:55:52:b9:fc:77:1a:b3:87:bf:
                    12:31:fc:73:66:44:d9:94:59:6e:53:3a:05:52:de:
                    33:5f:7d:0a:78:9d:7d:cf:af:70:79:8c:9f:16:04:
                    5b:77:0e:16:36:84:7c:fc:81:7e:35:32:86:10:35:
                    48:8b:1a:62:7e:4c:70:47:ae:3f:37:5a:d6:b4:2f:
                    74:90:7f:cf:5f:a0:c6:a3:2c:d3:f7:96:ea:c8:69:
                    63:da:b8:f0:41:03:75:b5:94:e0:32:8d:e8:7e:ac:
                    1e:f6:1b:f9:a3:4a:fd:a4:35:4d:42:f8:eb:47:09:
                    7e:29:c8:5d:91:af:59:49:9b:f1:99:38:54:34:85:
                    1a:cb:cd:a9:3b:ef:6c:4b:92:e1:cd:df:03:92:e4:
                    db:1c:7c:7b:44:38:e9:be:74:b1:20:25:4c:9f:ba:
                    71:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:AE:6F:6A:79:4B:66:12:04:DB:2C:34:29:08:C4:B7:E0:B7:57:37
            X509v3 Authority Key Identifier:
                keyid:44:6F:AF:92:3B:EB:AF:96:35:72:87:FE:25:09:91:C7:54:91:45:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RG-vkjvrr5Y1cof-JQmRx1SRRU0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:5a:30:69:23:7c:60:5c:03:6a:94:1e:b6:07:69:74:4a:92:
         c4:77:c5:ab:ed:a4:c9:87:0c:e4:a3:57:02:ca:2d:4b:82:7d:
         50:00:89:cc:9e:ab:0d:8b:57:dd:38:7a:5b:a3:f5:c3:73:5e:
         b9:5b:90:fb:39:77:b5:d0:59:8b:82:21:71:a5:be:14:2a:5b:
         40:bf:75:a8:8f:34:49:7a:55:16:ab:5b:20:bb:dd:d7:a6:e7:
         1e:67:1c:dc:46:a3:f0:8c:06:df:3e:96:bb:cf:4a:15:80:64:
         a1:fc:e2:5a:1f:3f:f3:2f:30:e8:24:8a:2a:d6:0f:ad:cf:1b:
         7d:ed:ef:4e:7f:61:d4:ea:5e:8b:c2:eb:41:be:e9:a8:59:04:
         9a:54:a2:07:0c:a0:2e:19:0b:c9:64:30:10:94:0d:77:0d:cd:
         72:75:b3:2b:89:76:21:ce:78:f0:94:bc:89:fe:2d:1d:5e:ca:
         5b:be:c6:7c:0b:26:a7:a8:98:b0:f2:27:81:e9:3c:60:f4:36:
         23:b3:d2:74:34:5e:c8:8f:74:4f:3b:47:20:74:7e:e1:6c:81:
         89:b3:5d:98:24:33:3e:80:de:5c:91:75:e9:ac:8d:28:a4:7e:
         0b:49:88:1e:1c:89:45:35:60:97:b5:54:49:7a:12:5b:72:4a:
         06:c1:8d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 04:00:15 2026 by rpki-client